2019

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be sus

A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not require

The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When

An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that

In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are pre

A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an authent

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID

OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication intege

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to cra

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be exe

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of

An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Ju

On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may cra

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix

The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI co

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when proces

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular

This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and confi

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Deni

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1

A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attac

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP sock

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failur

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Cl

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespac

A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spect

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters a

Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the to

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform action

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affe

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of al

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masqu

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanCha

OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into outfile" in a SELECT st

An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly wi

Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pb

Pi-Hole 4.3 allows Command Injection.

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were l

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthor

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Direct

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resulta

In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() functi

minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the comman